Configuring SED Settings

Advanced settings have reasonable defaults in place. A warning message displays for some settings advising of the dangers of making changes. Changing advanced settings can be dangerous when done incorrectly. Use caution before saving changes.

Make sure you are comfortable with ZFS, Linux, and system configuration, backup, and restoration before making any changes.

TrueNAS Enterprise

UI management of Self-Encrypting Drives (SED) is an Enterprise-licensed feature in TrueNAS 25.04 (and later). SED configuration options are not visible in the TrueNAS Community Edition. Community users wishing to implement SEDs can continue to do so using the command line sedutil-cli utility.

Note: Additional changes to SED management options in the TrueNAS UI ahead of the 25.04.0 release version, with documentation updates to follow.

To configure global SED settings, go to the System > Advanced Settings screen and locate the Self-Encrypting Drive widget.

Click Configure to open the Self-Encrypting Drive configuration screen.

Select the user to unlock SEDs from the ATA Security User dropdown list. Options are USER or MASTER.

Enter the global SED password in SED Password and in Confirm SED Password.

Click Save.

Remember SED passwords! If you lose the SED password, you cannot unlock SEDs or access their data. After configuring or modifying SED passwords, always record and store them in a secure location!

To configure individual, per-disk SED passwords, go to Storage and click Disks in the top right of the screen to open the Disks screen. Click the row or expand_more for a confirmed SED to expand the row. Click Edit to open the Edit Disk screen.

Enter and confirm the password in the SED Password fields to assign an individual SED password. If both an individual and global SED password are present, the individual SED password overrides the global password for the disk it is configured on.

Repeat this process for each SED and any SEDs added to the system in the future.